You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@flink.apache.org by "Martijn Visser (Jira)" <ji...@apache.org> on 2026/07/01 21:01:00 UTC

[jira] [Closed] (FLINK-39517) Resolve SemVer-compatible npm advisories in web-dashboard

     [ https://issues.apache.org/jira/browse/FLINK-39517?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martijn Visser closed FLINK-39517.
----------------------------------
    Resolution: Duplicate

>  Resolve SemVer-compatible npm advisories in web-dashboard 
> -----------------------------------------------------------
>
>                 Key: FLINK-39517
>                 URL: https://issues.apache.org/jira/browse/FLINK-39517
>             Project: Flink
>          Issue Type: Sub-task
>          Components: Runtime / Web Frontend
>            Reporter: Purushottam Sinha
>            Priority: Minor
>              Labels: pull-request-available
>         Attachments: AUDIT_FIX_SUMMARY.md
>
>
>   Resolve every advisory {{npm audit fix}} can fix *without* {{--force}}
>   — i.e., patches reachable inside the current {{package.json}} ranges.                                                                                                                                          
>                                                                                                                                                                                                                  
>   Expected: 24 of 55 advisories resolved (14 High, 7 Moderate, 3 Low).                                                                                                                                           
>   Both Criticals and the Angular/Protractor trees remain — see FLINK-39518.                                                                                                                                      
>                                                                                                                                                                                                                  
>   Done when:                                                                                                                                                                                                     
>   * Only {{package-lock.json}} changed                                                                                                                                                                           
>   * {{npm run build}} and {{npm run lint}} pass                                                                                                                                                                  
>   * Dashboard loads in a browser
>   * {{NOTICE}} regenerated                                                                                                                                                                                       
>   



--
This message was sent by Atlassian Jira
(v8.20.10#820010)